This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer File: E4B72563B465301EE966885E5BE212EE92B97305.cer (raw, json) Hash identifier: 88hYxaoC+zoG3CBlUVcwDHCrahst9x2lRmMERWdUyjQ= Subject key identifier: E4:B7:25:63:B4:65:30:1E:E9:66:88:5E:5B:E2:12:EE:92:B9:73:05 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 13C9845FD6EAD6C3346F46FC628D1F557EF3A788 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft caRepository: rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 09 Dec 2025 21:18:18 +0000 Certificate not after: Tue 08 Dec 2026 21:23:18 +0000 Subordinate resources: IP: 103.11.22.0/23 IP: 2001:df0:2ec::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:c9:84:5f:d6:ea:d6:c3:34:6f:46:fc:62:8d:1f:55:7e:f3:a7:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 9 21:18:18 2025 GMT Not After : Dec 8 21:23:18 2026 GMT Subject: CN=E4B72563B465301EE966885E5BE212EE92B97305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dd:f4:97:f5:08:c4:2e:5b:69:4c:b5:27:f3: a8:2c:e2:e4:0e:86:a1:44:f9:eb:20:4f:fc:33:dc: 4c:dc:d2:a7:04:b6:08:77:f8:a3:f6:2f:0a:03:94: 94:63:30:4e:4b:44:66:cb:45:db:4c:8b:5c:64:61: 3f:af:2e:07:c8:39:c4:02:49:9d:11:49:d1:4d:ca: fc:e7:af:a5:ef:bc:de:10:4c:ae:cf:de:22:6c:68: c9:3d:da:1d:cd:81:6d:82:e2:d1:88:73:32:b2:31: 5b:c6:7a:36:71:5d:17:c1:de:82:86:56:d1:3e:c8: 52:0a:73:6c:38:f8:e6:00:28:f4:60:c6:6b:69:b2: 55:30:85:69:b8:46:d1:f7:c2:20:33:cf:0a:5a:16: 93:83:b8:7f:66:7e:bf:7a:8b:d7:c5:a2:cb:cb:cb: 4e:99:f2:1d:51:1d:75:86:2c:f6:83:72:97:90:45: d4:ab:26:62:2f:8b:c4:05:84:42:81:3e:d8:45:52: 72:cb:5d:01:38:9f:5d:5f:7a:7d:f8:b9:8a:13:3f: 86:91:de:b5:13:12:7e:ab:1c:a3:dc:60:dc:19:c6: 59:84:90:f6:f0:ac:3a:1e:8e:ba:ca:16:35:0e:eb: 90:a1:c9:b0:f2:2e:5f:38:db:2d:01:23:ed:cc:51: a4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:B7:25:63:B4:65:30:1E:E9:66:88:5E:5B:E2:12:EE:92:B9:73:05 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.11.22.0/23 IPv6: 2001:df0:2ec::/48 Signature Algorithm: sha256WithRSAEncryption 3a:d0:bf:03:26:01:ba:a5:8a:48:95:61:2b:df:cd:c7:35:d6: 8b:4a:3d:7a:b5:0d:4f:9f:50:94:84:83:23:c0:1f:95:bf:6d: 1d:8d:4d:2f:a7:0d:ac:cd:d3:e4:b1:71:62:c3:28:55:8d:dd: 88:f3:b9:f2:ac:93:c2:21:bc:7b:6b:58:cc:c4:08:2c:6a:e0: 1b:61:e8:95:c7:f1:3a:50:3c:16:78:a0:6f:c9:db:d9:ba:2b: 32:e2:25:c9:fc:51:5d:ef:34:a1:35:f4:e8:a2:94:b2:8a:eb: 60:00:18:2b:58:52:c2:b1:00:8b:65:c5:48:d2:3e:21:4b:f2: 3e:1c:43:14:4c:4a:33:9c:e3:bb:28:04:16:b5:7e:bc:11:96: 58:ae:f7:46:16:5e:09:3a:2a:c8:0c:e7:10:a9:0c:a5:ca:91: c2:79:37:14:eb:36:17:dd:b9:57:31:ef:63:b7:41:73:6f:1b: 60:1a:b3:d5:de:05:eb:84:d9:f1:0f:bb:7e:07:9e:3d:75:fd: b4:a4:87:0b:83:f4:e9:f3:41:11:e9:13:be:10:53:1a:eb:89: a9:18:6e:f8:03:49:28:99:b5:c8:8a:92:4f:97:60:f8:e9:b4: 0e:f7:06:82:bc:26:4e:6c:60:84:00:0c:94:31:67:99:50:75: 1a:fa:a2:76 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUE8mEX9bq1sM0b0b8Yo0fVX7zp4gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwOTIxMTgxOFoX DTI2MTIwODIxMjMxOFowMzExMC8GA1UEAxMoRTRCNzI1NjNCNDY1MzAxRUU5NjY4 ODVFNUJFMjEyRUU5MkI5NzMwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbd9Jf1CMQuW2lMtSfzqCzi5A6GoUT56yBP/DPcTNzSpwS2CHf4o/YvCgOU lGMwTktEZstF20yLXGRhP68uB8g5xAJJnRFJ0U3K/Oevpe+83hBMrs/eImxoyT3a Hc2BbYLi0YhzMrIxW8Z6NnFdF8HegoZW0T7IUgpzbDj45gAo9GDGa2myVTCFabhG 0ffCIDPPCloWk4O4f2Z+v3qL18Wiy8vLTpnyHVEddYYs9oNyl5BF1KsmYi+LxAWE QoE+2EVScstdATifXV96ffi5ihM/hpHetRMSfqsco9xg3BnGWYSQ9vCsOh6OusoW NQ7rkKHJsPIuXzjbLQEj7cxRpOsCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOS3JWO0ZTAe6WaIXlviEu6SuXMFMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xODdhZGU5Zi02Yjc5LTQ3MjMtOTk0OS05NmRlN2U0MWRiNzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4N2FkZTlm LTZiNzktNDcyMy05OTQ5LTk2ZGU3ZTQxZGI3MC8wL0U0QjcyNTYzQjQ2NTMwMUVF OTY2ODg1RTVCRTIxMkVFOTJCOTczMDUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnCxYwDwQCAAIwCQMHACABDfAC7DANBgkqhkiG9w0BAQsFAAOCAQEAOtC/AyYB uqWKSJVhK9/NxzXWi0o9erUNT59QlISDI8Aflb9tHY1NL6cNrM3T5LFxYsMoVY3d iPO58qyTwiG8e2tYzMQILGrgG2HolcfxOlA8Fnigb8nb2borMuIlyfxRXe80oTX0 6KKUsorrYAAYK1hSwrEAi2XFSNI+IUvyPhxDFExKM5zjuygEFrV+vBGWWK73RhZe CToqyAznEKkMpcqRwnk3FOs2F925VzHvY7dBc28bYBqz1d4F64TZ8Q+7fgeePXX9 tKSHC4P06fNBEekTvhBTGuuJqRhu+ANJKJm1yIqST5dg+Om0DvcGgrwmTmxghAAM lDFnmVB1Gvqidg== -----END CERTIFICATE-----Generated at Wed Dec 24 14:51:53 2025 by rpki-client